livedesk 0.1.450 → 0.1.452

package/bin/livedesk.js

@@ -2794,6 +2794,10 @@ async function runClient(args, resolvedRole = null, runtimeLock = null) {
       : String(process.env.LIVEDESK_SKIP_BROWSER_OPEN || ''),
     LIVEDESK_DEVICE_ID: String(resolvedRole?.deviceId || process.env.LIVEDESK_DEVICE_ID || ''),
     LIVEDESK_ROLE_SOURCE: String(resolvedRole?.source || process.env.LIVEDESK_ROLE_SOURCE || ''),
+    LIVEDESK_ASSIGNED_HUB_ID: String(resolvedRole?.assignedHubId || ''),
+    LIVEDESK_ROLE_VERSION: Number.isInteger(resolvedRole?.roleVersion) && resolvedRole.roleVersion >= 0
+      ? String(resolvedRole.roleVersion)
+      : '0',
     LIVEDESK_RUNTIME_OWNER_PID: String(runtimeOwner?.pid || ''),
     LIVEDESK_RUNTIME_OWNER_TOKEN: String(runtimeOwner?.ownerToken || ''),
     LIVEDESK_RUNTIME_OWNER_INSTANCE_MARKER: String(runtimeOwner?.ownerInstanceMarker || ''),

package/client/bin/livedesk-client.js

@@ -3301,6 +3301,8 @@ async function chooseClientConnection(supabase, options = {}) {
             deviceId: options.deviceId,
             engine: options.engine,
             slot: options.slot,
+            assignedHubId: process.env.LIVEDESK_ASSIGNED_HUB_ID,
+            roleVersion: process.env.LIVEDESK_ROLE_VERSION,
             savedSession: options.savedSession,
             initialChoice: options.initialChoice,
             initialChoiceMessage: options.initialChoiceMessage,

package/client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livedesk/client",
-  "version": "0.1.205",
+  "version": "0.1.207",
   "description": "LiveDesk local remote client",
   "type": "module",
   "bin": {
@@ -40,10 +40,10 @@
     "ws": "^8.18.3"
   },
   "optionalDependencies": {
-    "@livedesk/fast-linux-x64": "0.1.412",
-    "@livedesk/fast-osx-arm64": "0.1.412",
-    "@livedesk/fast-osx-x64": "0.1.412",
-    "@livedesk/fast-win-x64": "0.1.412"
+    "@livedesk/fast-linux-x64": "0.1.413",
+    "@livedesk/fast-osx-arm64": "0.1.413",
+    "@livedesk/fast-osx-x64": "0.1.413",
+    "@livedesk/fast-win-x64": "0.1.413"
   },
   "publishConfig": {
     "access": "public"

package/client/src/runtime/client-runtime-server.js

@@ -150,6 +150,11 @@ function normalizeSlotNumber(value) {
     : 0;
 }
 
+function normalizeRoleVersion(value) {
+  const roleVersion = Number(String(value ?? '').trim());
+  return Number.isInteger(roleVersion) && roleVersion >= 0 ? roleVersion : 0;
+}
+
 function readCpuTotals() {
   return os.cpus().reduce((totals, cpu) => {
     const times = Object.values(cpu.times || {}).map(Number);
@@ -655,9 +660,9 @@ export function createClientRuntimeServer(options = {}) {
     manager: '',
     pairToken: '',
     slotNumber: normalizeSlotNumber(options.slot),
-    assignedHubId: '',
+    assignedHubId: normalizeString(options.assignedHubId ?? process.env.LIVEDESK_ASSIGNED_HUB_ID, 160),
     endpointCandidates: [],
-    roleVersion: 0,
+    roleVersion: normalizeRoleVersion(options.roleVersion ?? process.env.LIVEDESK_ROLE_VERSION),
     connectedAt: '',
     message: 'Sign in with Google or enter a Hub PIN to start this Client.',
     startup: false,
@@ -788,6 +793,12 @@ export function createClientRuntimeServer(options = {}) {
           name: accountProfile.name || state.auth.name,
           avatarUrl: accountProfile.avatarUrl || state.auth.avatarUrl
         };
+        state.lastError = '';
+        if (state.message.startsWith('Client authentication needs attention:')) {
+          state.message = state.agent.state === 'running'
+            ? 'Connected to the LiveDesk Hub.'
+            : normalizeString(message, 1000) || 'Client credentials accepted. Finding the Hub.';
+        }
       }
       return;
     }
@@ -795,7 +806,9 @@ export function createClientRuntimeServer(options = {}) {
     loggedOut = false;
     state.connectedAt = new Date().toISOString();
     state.manager = normalizeString(choice?.manager, 256);
-    state.assignedHubId = normalizeString(choice?.hubDeviceId, 160);
+    if (Object.prototype.hasOwnProperty.call(choice || {}, 'hubDeviceId')) {
+      state.assignedHubId = normalizeString(choice?.hubDeviceId, 160);
+    }
     state.endpointCandidates = Array.isArray(choice?.endpointCandidates)
       ? choice.endpointCandidates.map(value => normalizeString(value, 256)).filter(Boolean)
       : [];
@@ -1337,7 +1350,9 @@ export function createClientRuntimeServer(options = {}) {
       if (patch.manager) state.manager = normalizeString(patch.manager, 256);
       if (patch.pairToken) state.pairToken = normalizeString(patch.pairToken, 256);
       if (normalizeSlotNumber(patch.slotNumber)) state.slotNumber = normalizeSlotNumber(patch.slotNumber);
-      if (patch.assignedHubId) state.assignedHubId = normalizeString(patch.assignedHubId, 160);
+      if (Object.prototype.hasOwnProperty.call(patch, 'assignedHubId')) {
+        state.assignedHubId = normalizeString(patch.assignedHubId, 160);
+      }
       if (patch.message) state.message = normalizeString(patch.message, 1000);
       if (Number.isInteger(patch.roleVersion)) state.roleVersion = patch.roleVersion;
       if (Array.isArray(patch.endpointCandidates)) state.endpointCandidates = patch.endpointCandidates;

package/hub/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livedesk/hub",
-  "version": "0.1.18",
+  "version": "0.1.20",
   "description": "LiveDesk local Hub API and browser frame bridge",
   "type": "module",
   "main": "src/server.js",

package/hub/src/agents/agent-manager.js

@@ -1,7 +1,7 @@
 import os from 'node:os';
 import path from 'node:path';
-import { AgentSettingsStore, AGENT_PROVIDER_CODEX } from './agent-settings.js';
-import { AgentProviderError } from './provider-errors.js';
+import { AgentSettingsStore } from './agent-settings.js';
+import { AgentRuntimeError } from './agent-runtime-error.js';
 
 function publicCodexStatus(status = {}) {
   return {
@@ -42,66 +42,22 @@ export function createAgentManager({
 
   async function publicSettings() {
     const current = await settings.get();
-    const { codexMaxTurns: _codexMaxTurns, ...exposedSettings } = current;
     const codex = await getCodexStatus();
-    const securityStatus = runtime?.getSecurityStatus?.() || {
-      isolatedCodexHome: false,
-      restrictedEnvironment: false,
-      livedeskMcpOnly: false,
-      selectedDeviceScopeEnforced: false,
-      failClosed: true,
-      verified: false,
-      state: 'unavailable'
-    };
     return {
-      ...exposedSettings,
-      provider: AGENT_PROVIDER_CODEX,
+      enabled: current.enabled === true,
       codexInstallation: codex.installed ? 'installed' : 'not-installed',
       codexAuth: codex.authenticated,
-      codexStatus: codex.status,
-      codexPath: codex.codexPath,
-      agentWorkspacePath: current.codexWorkingDirectory,
-      securityStatus
+      codexStatus: codex.status
     };
   }
 
   return {
     getSettings: publicSettings,
-    async updateSettings(patch = {}) {
-      const nextPatch = { ...patch };
-      const requestedProvider = String(nextPatch.provider || AGENT_PROVIDER_CODEX).trim().toLowerCase();
-      const suppliedLegacyKey = typeof nextPatch.apiKey === 'string' && nextPatch.apiKey.trim().length > 0;
-      delete nextPatch.provider;
-      delete nextPatch.apiKey;
-      if (requestedProvider !== AGENT_PROVIDER_CODEX || suppliedLegacyKey) {
-        throw new AgentProviderError(
-          'agent-provider-retired',
-          'LiveDesk uses the Hub-hosted Codex Agent and does not configure alternate model providers.',
-          { status: 400 }
-        );
-      }
-      await settings.update({ ...nextPatch, provider: AGENT_PROVIDER_CODEX });
-      statusCache = { expiresAt: 0, value: null };
-      return publicSettings();
-    },
-    async resetSettings() {
-      await settings.reset();
-      statusCache = { expiresAt: 0, value: null };
-      return publicSettings();
-    },
-    // Kept as a harmless compatibility endpoint for an older cached web UI.
-    // No credential is read, written, or returned by the current Hub.
-    async deleteApiKey() {
-      return publicSettings();
-    },
     async testConnection() {
-      if (!runtime) throw new AgentProviderError('codex-sdk-not-installed', 'Codex SDK is not installed.', { status: 503 });
+      if (!runtime) throw new AgentRuntimeError('codex-sdk-not-installed', 'Codex SDK is not installed.', { status: 503 });
       statusCache = { expiresAt: 0, value: null };
       return runtime.testConnection();
     },
-    async createPlan() {
-      throw new AgentProviderError('agent-codex-run-required', 'Codex Agent requests use the LiveDesk tool loop.', { status: 409 });
-    },
     async createSummary(input) {
       const source = input && typeof input === 'object' ? input : {};
       const results = Array.isArray(source.results) ? source.results : [];
@@ -110,9 +66,8 @@ export function createAgentManager({
       };
     },
     async startRun(input) {
-      const current = await settings.get();
-      if (current.provider !== AGENT_PROVIDER_CODEX || !runtime) {
-        throw new AgentProviderError('agent-codex-not-active', 'Codex SDK is not the active Agent runtime.', { status: 409 });
+      if (!runtime) {
+        throw new AgentRuntimeError('agent-codex-not-active', 'Codex SDK is not available for LiveDesk Agent commands.', { status: 409 });
       }
       return runtime.start(input);
     },

package/hub/src/agents/agent-runtime-error.js

@@ -0,0 +1,9 @@
+export class AgentRuntimeError extends Error {
+  constructor(code, message, { status = 502, retryable = false } = {}) {
+    super(message);
+    this.name = 'AgentRuntimeError';
+    this.code = code;
+    this.status = status;
+    this.retryable = retryable;
+  }
+}

package/hub/src/agents/agent-settings.js

@@ -2,23 +2,13 @@ import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 
-export const AGENT_PROVIDER_CODEX = 'codex';
-export const DEFAULT_AGENT_PROVIDER = AGENT_PROVIDER_CODEX;
-export const DEFAULT_AGENT_WORKSPACE = path.join(os.homedir(), '.livedesk', 'agent-workspace');
 export const DEFAULT_AGENT_SETTINGS = Object.freeze({
-  settingsVersion: 4,
+  settingsVersion: 5,
   enabled: true,
-  provider: DEFAULT_AGENT_PROVIDER,
-  codexSandboxMode: 'read-only',
-  codexApprovalPolicy: 'never',
-  codexWorkingDirectory: DEFAULT_AGENT_WORKSPACE,
   codexTaskTimeoutMs: 600000,
   codexMaxTurns: 12,
   codexMaxToolCalls: 20,
   codexResumeSessions: true,
-  codexShowDetailedEvents: true,
-  codexNetworkAccessEnabled: false,
-  codexWebSearchMode: 'disabled',
   maxConcurrentRequests: 2
 });
 
@@ -33,32 +23,15 @@ function numberValue(value, min, max, fallback, integer = false) {
   return integer ? Math.round(clamped) : clamped;
 }
 
-function normalizeWorkingDirectory() {
-  // The agent runtime owns this directory. Do not allow a browser/API caller
-  // to move Codex into a user project or an arbitrary filesystem root.
-  return DEFAULT_AGENT_WORKSPACE;
-}
-
 export function normalizeAgentSettings(value = {}) {
   const source = value && typeof value === 'object' && !Array.isArray(value) ? value : {};
   return {
-    settingsVersion: 4,
+    settingsVersion: 5,
     enabled: booleanValue(source.enabled, DEFAULT_AGENT_SETTINGS.enabled),
-    // LiveDesk has one Agent runtime. Old provider values are deliberately
-    // normalized to Codex so an upgrade cannot reactivate a retired provider.
-    provider: AGENT_PROVIDER_CODEX,
-    // These are safety settings, not user-controlled execution toggles. They
-    // are accepted for compatibility but always normalized to the safe floor.
-    codexSandboxMode: 'read-only',
-    codexApprovalPolicy: 'never',
-    codexWorkingDirectory: normalizeWorkingDirectory(),
     codexTaskTimeoutMs: numberValue(source.codexTaskTimeoutMs, 30000, 1800000, DEFAULT_AGENT_SETTINGS.codexTaskTimeoutMs, true),
     codexMaxTurns: numberValue(source.codexMaxTurns, 1, 40, DEFAULT_AGENT_SETTINGS.codexMaxTurns, true),
     codexMaxToolCalls: numberValue(source.codexMaxToolCalls, 1, 100, DEFAULT_AGENT_SETTINGS.codexMaxToolCalls, true),
     codexResumeSessions: booleanValue(source.codexResumeSessions, DEFAULT_AGENT_SETTINGS.codexResumeSessions),
-    codexShowDetailedEvents: booleanValue(source.codexShowDetailedEvents, DEFAULT_AGENT_SETTINGS.codexShowDetailedEvents),
-    codexNetworkAccessEnabled: false,
-    codexWebSearchMode: 'disabled',
     maxConcurrentRequests: numberValue(source.maxConcurrentRequests, 1, 8, DEFAULT_AGENT_SETTINGS.maxConcurrentRequests, true)
   };
 }
@@ -95,10 +68,4 @@ export class AgentSettingsStore {
     return { ...next };
   }
 
-  async reset() {
-    const next = normalizeAgentSettings(DEFAULT_AGENT_SETTINGS);
-    await writeJsonAtomic(this.filePath, next);
-    this.settings = next;
-    return { ...next };
-  }
 }

package/hub/src/agents/codex-agent-runtime.js

@@ -3,10 +3,9 @@ import { access, link, mkdir, stat, unlink } from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { spawn } from 'node:child_process';
-import { createRequire } from 'node:module';
-import { AgentProviderError } from './provider-errors.js';
-import { AGENT_PROVIDER_CODEX } from './agent-settings.js';
-import { AGENT_TOOL_NAMES } from './agent-tool-registry.js';
+import { createRequire } from 'node:module';
+import { AgentRuntimeError } from './agent-runtime-error.js';
+import { AGENT_TOOL_NAMES } from './agent-tool-registry.js';
 import { createAgentPermissionPolicy, hashAgentPermissionPolicy } from './agent-permissions.js';
 
 const require = createRequire(import.meta.url);
@@ -58,12 +57,12 @@ function isAbortError(error) {
 
 function normalizeCodexError(error) {
   const message = safeText(error?.message, 800) || 'Codex run failed.';
-  if (error instanceof AgentProviderError && error.code !== 'codex-run-failed') return error;
-  if (/out of credits|usage limit|rate limit|too many requests/i.test(message)) return new AgentProviderError('codex-usage-limit-reached', 'The Codex workspace has no remaining usage.', { status: 402, retryable: true });
-  if (/refresh[_ -]?token[_ -]?(?:already[_ -]?)?used|token refresh|refresh credential/i.test(message)) return new AgentProviderError('codex-auth-stale', 'The saved Codex sign-in is stale. LiveDesk refreshed its Codex authentication bridge and will retry.', { status: 401, retryable: true });
-  if (/not authenticated|not logged in|authentication|unauthorized|login required/i.test(message)) return new AgentProviderError('codex-auth-required', 'Sign in with the Codex CLI first.', { status: 401 });
-  if (/user cancelled MCP tool call/i.test(message)) return new AgentProviderError('codex-mcp-tool-rejected', 'Codex rejected the LiveDesk MCP tool before it reached the Hub.', { status: 502 });
-  return new AgentProviderError('codex-run-failed', message, { status: 502, retryable: true });
+  if (error instanceof AgentRuntimeError && error.code !== 'codex-run-failed') return error;
+  if (/out of credits|usage limit|rate limit|too many requests/i.test(message)) return new AgentRuntimeError('codex-usage-limit-reached', 'The Codex workspace has no remaining usage.', { status: 402, retryable: true });
+  if (/refresh[_ -]?token[_ -]?(?:already[_ -]?)?used|token refresh|refresh credential/i.test(message)) return new AgentRuntimeError('codex-auth-stale', 'The saved Codex sign-in is stale. LiveDesk refreshed its Codex authentication bridge and will retry.', { status: 401, retryable: true });
+  if (/not authenticated|not logged in|authentication|unauthorized|login required/i.test(message)) return new AgentRuntimeError('codex-auth-required', 'Sign in with the Codex CLI first.', { status: 401 });
+  if (/user cancelled MCP tool call/i.test(message)) return new AgentRuntimeError('codex-mcp-tool-rejected', 'Codex rejected the LiveDesk MCP tool before it reached the Hub.', { status: 502 });
+  return new AgentRuntimeError('codex-run-failed', message, { status: 502, retryable: true });
 }
 
 function codexThreadOptions(workspace) {
@@ -165,16 +164,16 @@ async function ensureCodexHome(codexHome, globalCodexHome, { preferGlobalAuth =
   const resolvedHome = path.resolve(codexHome);
   const globalHome = path.resolve(globalCodexHome);
   if (!resolvedHome || resolvedHome === globalHome) {
-    throw new AgentProviderError('codex-isolation-unavailable', 'Codex requires a dedicated LiveDesk home.', { status: 503 });
+    throw new AgentRuntimeError('codex-isolation-unavailable', 'Codex requires a dedicated LiveDesk home.', { status: 503 });
   }
   try {
     await mkdir(resolvedHome, { recursive: true, mode: 0o700 });
     if (await access(path.join(resolvedHome, 'config.toml')).then(() => true, () => false)) {
-      throw new AgentProviderError('codex-environment-isolation-failed', 'The dedicated Codex home contains an unmanaged config.toml.', { status: 503 });
+      throw new AgentRuntimeError('codex-environment-isolation-failed', 'The dedicated Codex home contains an unmanaged config.toml.', { status: 503 });
     }
   } catch (error) {
-    if (error instanceof AgentProviderError) throw error;
-    const wrapped = new AgentProviderError('codex-environment-isolation-failed', 'The dedicated Codex home could not be prepared.', { status: 503 });
+    if (error instanceof AgentRuntimeError) throw error;
+    const wrapped = new AgentRuntimeError('codex-environment-isolation-failed', 'The dedicated Codex home could not be prepared.', { status: 503 });
     wrapped.cause = error;
     throw wrapped;
   }
@@ -201,7 +200,7 @@ async function ensureCodexHome(codexHome, globalCodexHome, { preferGlobalAuth =
       await replaceAuthHardLink(sourceAuthPath, targetAuthPath);
     }
   } catch (error) {
-    const wrapped = new AgentProviderError('codex-environment-isolation-failed', 'The Codex authentication bridge could not be prepared.', { status: 503 });
+    const wrapped = new AgentRuntimeError('codex-environment-isolation-failed', 'The Codex authentication bridge could not be prepared.', { status: 503 });
     wrapped.cause = error;
     throw wrapped;
   }
@@ -244,7 +243,7 @@ function runAgeMs(run) {
 }
 
 function codexAbortError(code, message) {
-  return new AgentProviderError(code, message, { status: code === 'codex-run-timeout' ? 504 : 409, retryable: code === 'codex-run-timeout' });
+  return new AgentRuntimeError(code, message, { status: code === 'codex-run-timeout' ? 504 : 409, retryable: code === 'codex-run-timeout' });
 }
 
 function safeAgentDeviceIds(value) {
@@ -332,7 +331,7 @@ export function createCodexAgentRuntime({
   function assertSecurityConfiguration() {
     const status = securityStatus();
     if (!status.isolatedCodexHome || !status.restrictedEnvironment || !status.livedeskMcpOnly || !status.selectedDeviceScopeEnforced) {
-      throw new AgentProviderError('codex-unsupported-security-config', 'Codex security isolation is not available.', { status: 503 });
+      throw new AgentRuntimeError('codex-unsupported-security-config', 'Codex security isolation is not available.', { status: 503 });
     }
   }
 
@@ -365,7 +364,7 @@ export function createCodexAgentRuntime({
 
   async function loadCodex() {
     if (!codexModulePromise) codexModulePromise = import('@openai/codex-sdk').catch(error => {
-      const wrapped = new AgentProviderError('codex-sdk-not-installed', 'Codex SDK is not installed in this LiveDesk package.', { status: 503 });
+      const wrapped = new AgentRuntimeError('codex-sdk-not-installed', 'Codex SDK is not installed in this LiveDesk package.', { status: 503 });
       wrapped.cause = error;
       throw wrapped;
     });
@@ -396,7 +395,7 @@ export function createCodexAgentRuntime({
         ? 'signed-in'
         : 'not-signed-in';
     } catch (error) {
-      if (error instanceof AgentProviderError) throw error;
+      if (error instanceof AgentRuntimeError) throw error;
       detail = safeText(error?.message, 300);
     }
     return { installed: true, authenticated, status: authenticated === 'signed-in' ? 'ready' : 'auth-required', codexPath: pathToCli, detail };
@@ -406,8 +405,8 @@ export function createCodexAgentRuntime({
     assertSecurityConfiguration();
     const startedAt = Date.now();
     const status = await getStatus();
-    if (!status.installed) throw new AgentProviderError('codex-sdk-not-installed', 'Codex SDK is not installed.', { status: 503 });
-    if (status.authenticated !== 'signed-in') throw new AgentProviderError('codex-auth-required', 'Sign in with the Codex CLI first.', { status: 401 });
+    if (!status.installed) throw new AgentRuntimeError('codex-sdk-not-installed', 'Codex SDK is not installed.', { status: 503 });
+    if (status.authenticated !== 'signed-in') throw new AgentRuntimeError('codex-auth-required', 'Sign in with the Codex CLI first.', { status: 401 });
     const settings = await settingsStore.get();
     await mkdir(workspace, { recursive: true });
     await prepareCodexHome();
@@ -417,7 +416,7 @@ export function createCodexAgentRuntime({
     try {
       const thread = codex.startThread(codexThreadOptions(workspace));
       const turn = await thread.run('Reply with the single word READY. Do not use tools.', { signal: controller.signal });
-      if (!String(turn.finalResponse || '').trim()) throw new AgentProviderError('codex-empty-response', 'Codex returned an empty response.', { status: 502 });
+      if (!String(turn.finalResponse || '').trim()) throw new AgentRuntimeError('codex-empty-response', 'Codex returned an empty response.', { status: 502 });
       return { ok: true, latencyMs: Date.now() - startedAt, threadId: thread.id || '' };
     } catch (error) {
       throw normalizeCodexError(error);
@@ -427,11 +426,10 @@ export function createCodexAgentRuntime({
   }
 
   function publicRun(run) {
-    return {
-      runId: run.runId,
-      status: run.status,
-      provider: AGENT_PROVIDER_CODEX,
-      instruction: run.instruction,
+    return {
+      runId: run.runId,
+      status: run.status,
+      instruction: run.instruction,
       threadId: run.threadId,
       finalResponse: run.finalResponse,
       error: run.error,
@@ -494,15 +492,15 @@ export function createCodexAgentRuntime({
       timeoutTimer.unref?.();
       await mkdir(workspace, { recursive: true });
       if (activeCount > settings.maxConcurrentRequests) {
-        throw new AgentProviderError('agent-concurrency-limit', 'The LiveDesk Agent concurrency limit is reached.', { status: 429, retryable: true });
+        throw new AgentRuntimeError('agent-concurrency-limit', 'The LiveDesk Agent concurrency limit is reached.', { status: 429, retryable: true });
       }
       if (run.abortController.signal.aborted) {
         if (run.abortReason === 'timeout') throw codexAbortError('codex-run-timeout', 'The Codex task exceeded its timeout.');
         throw Object.assign(new Error('The Codex task was cancelled.'), { name: 'AbortError' });
       }
       const status = await getStatus();
-      if (!status.installed) throw new AgentProviderError('codex-sdk-not-installed', 'Codex SDK is not installed.', { status: 503 });
-      if (status.authenticated !== 'signed-in') throw new AgentProviderError('codex-auth-required', 'Sign in with the Codex CLI first.', { status: 401 });
+      if (!status.installed) throw new AgentRuntimeError('codex-sdk-not-installed', 'Codex SDK is not installed.', { status: 503 });
+      if (status.authenticated !== 'signed-in') throw new AgentRuntimeError('codex-auth-required', 'Sign in with the Codex CLI first.', { status: 401 });
       reportProgress(run, 'preparing-tools', 'Codex is ready. Preparing the LiveDesk tools for this Client.');
       session = createMcpSession({
         runId: run.runId,
@@ -554,14 +552,14 @@ export function createCodexAgentRuntime({
                 run.abortReason = 'turn-limit';
                 run.abortController.abort();
                 session.cancel();
-                throw new AgentProviderError('codex-turn-limit-reached', 'Codex exceeded the LiveDesk turn limit.', { status: 409 });
+                throw new AgentRuntimeError('codex-turn-limit-reached', 'Codex exceeded the LiveDesk turn limit.', { status: 409 });
               }
             }
             if (run.toolCallCount > run.permissionPolicy.maxToolCalls) {
               run.abortReason = 'tool-limit';
               run.abortController.abort();
               session.cancel();
-              throw new AgentProviderError('codex-tool-limit-reached', 'Codex exceeded the LiveDesk tool-call limit.', { status: 409 });
+              throw new AgentRuntimeError('codex-tool-limit-reached', 'Codex exceeded the LiveDesk tool-call limit.', { status: 409 });
             }
             if (event.type === 'item.completed' && event.item?.type === 'mcp_tool_call' && event.item?.status === 'failed') {
               throw new Error(safeText(event.item?.error?.message, 800) || `LiveDesk tool ${safeText(event.item?.tool, 120) || 'call'} failed.`);
@@ -643,21 +641,20 @@ export function createCodexAgentRuntime({
 
   async function start(input = {}) {
     const instruction = safeText(input.instruction, 4000);
-    if (!instruction) throw new AgentProviderError('agent-invalid-instruction', 'Instruction is required.', { status: 400 });
+    if (!instruction) throw new AgentRuntimeError('agent-invalid-instruction', 'Instruction is required.', { status: 400 });
     const deviceIds = safeAgentDeviceIds(input.deviceIds);
-    if (deviceIds.length === 0) throw new AgentProviderError('agent-no-target-devices', 'Select at least one connected device.', { status: 400 });
+    if (deviceIds.length === 0) throw new AgentRuntimeError('agent-no-target-devices', 'Select at least one connected device.', { status: 400 });
     const settings = await settingsStore.get();
-    if (!settings.enabled) throw new AgentProviderError('agent-ai-disabled', 'Codex Agent is disabled in Settings.', { status: 409 });
+    if (!settings.enabled) throw new AgentRuntimeError('agent-disabled', 'Codex Agent is disabled in Settings.', { status: 409 });
     assertSecurityConfiguration();
     pruneRuns();
-    if (runs.size >= MAX_RUNS) throw new AgentProviderError('agent-run-limit', 'The LiveDesk Agent run history is full.', { status: 429, retryable: true });
+    if (runs.size >= MAX_RUNS) throw new AgentRuntimeError('agent-run-limit', 'The LiveDesk Agent run history is full.', { status: 429, retryable: true });
     const permissionPolicy = freezeAgentPermissionPolicy(input.permissionPolicy && typeof input.permissionPolicy === 'object'
       ? input.permissionPolicy
       : createAgentPermissionPolicy({ mode: input.permissionMode || 'safe-auto', deviceIds, maxToolCalls: settings.codexMaxToolCalls }));
-    const run = {
-      runId: crypto.randomUUID(),
-      status: 'queued',
-      provider: AGENT_PROVIDER_CODEX,
+    const run = {
+      runId: crypto.randomUUID(),
+      status: 'queued',
       instruction,
       deviceIds,
       threadId: '',

package/hub/src/remote-hub.js

@@ -3898,14 +3898,21 @@ export function createRemoteHub(options = {}) {
                 : null,
             nativeEncoderHardwareQueryStatus: safeString(message.nativeEncoderHardwareQueryStatus, 80),
             nativeCaptureFps: Number.isFinite(Number(message.nativeCaptureFps)) ? Number(message.nativeCaptureFps) : 0,
+            nativeCompressionFps: Number.isFinite(Number(message.nativeCompressionFps)) ? Number(message.nativeCompressionFps) : 0,
             nativeEncodedFps: Number.isFinite(Number(message.nativeEncodedFps)) ? Number(message.nativeEncodedFps) : 0,
             nativeCaptureSampleCount: Number.isFinite(Number(message.nativeCaptureSampleCount)) ? Number(message.nativeCaptureSampleCount) : 0,
             nativeEncodableFrameCount: Number.isFinite(Number(message.nativeEncodableFrameCount)) ? Number(message.nativeEncodableFrameCount) : 0,
             nativeSkippedFrameCount: Number.isFinite(Number(message.nativeSkippedFrameCount)) ? Number(message.nativeSkippedFrameCount) : 0,
+            nativeCompressionOutputCount: Number.isFinite(Number(message.nativeCompressionOutputCount)) ? Number(message.nativeCompressionOutputCount) : 0,
             nativeEncodedFrameCount: Number.isFinite(Number(message.nativeEncodedFrameCount)) ? Number(message.nativeEncodedFrameCount) : 0,
             nativeEncodeFramesInFlight: Number.isFinite(Number(message.nativeEncodeFramesInFlight)) ? Number(message.nativeEncodeFramesInFlight) : 0,
             nativeBackpressureSkippedFrameCount: Number.isFinite(Number(message.nativeBackpressureSkippedFrameCount)) ? Number(message.nativeBackpressureSkippedFrameCount) : 0,
             nativeIdleSkippedFrameCount: Number.isFinite(Number(message.nativeIdleSkippedFrameCount)) ? Number(message.nativeIdleSkippedFrameCount) : 0,
+            nativeOutputQueueDepth: Number.isFinite(Number(message.nativeOutputQueueDepth)) ? Number(message.nativeOutputQueueDepth) : 0,
+            nativeOutputQueueBytes: Number.isFinite(Number(message.nativeOutputQueueBytes)) ? Number(message.nativeOutputQueueBytes) : 0,
+            nativeOutputQueueHighWatermark: Number.isFinite(Number(message.nativeOutputQueueHighWatermark)) ? Number(message.nativeOutputQueueHighWatermark) : 0,
+            nativeOutputQueueDroppedCount: Number.isFinite(Number(message.nativeOutputQueueDroppedCount)) ? Number(message.nativeOutputQueueDroppedCount) : 0,
+            nativeOutputQueueAwaitingKeyFrame: message.nativeOutputQueueAwaitingKeyFrame === true,
             nativeCaptureTelemetryAt: safeString(message.nativeCaptureTelemetryAt, 80),
             droppedByAgent: Number.isFinite(Number(message.droppedByAgent)) ? Number(message.droppedByAgent) : 0,
             hardwareEncoder: safeString(message.hardwareEncoder, 80),
@@ -4280,14 +4287,21 @@ export function createRemoteHub(options = {}) {
                 : null,
             nativeEncoderHardwareQueryStatus: safeString(message.nativeEncoderHardwareQueryStatus, 80),
             nativeCaptureFps: Number.isFinite(Number(message.nativeCaptureFps)) ? Number(message.nativeCaptureFps) : 0,
+            nativeCompressionFps: Number.isFinite(Number(message.nativeCompressionFps)) ? Number(message.nativeCompressionFps) : 0,
             nativeEncodedFps: Number.isFinite(Number(message.nativeEncodedFps)) ? Number(message.nativeEncodedFps) : 0,
             nativeCaptureSampleCount: Number.isFinite(Number(message.nativeCaptureSampleCount)) ? Number(message.nativeCaptureSampleCount) : 0,
             nativeEncodableFrameCount: Number.isFinite(Number(message.nativeEncodableFrameCount)) ? Number(message.nativeEncodableFrameCount) : 0,
             nativeSkippedFrameCount: Number.isFinite(Number(message.nativeSkippedFrameCount)) ? Number(message.nativeSkippedFrameCount) : 0,
+            nativeCompressionOutputCount: Number.isFinite(Number(message.nativeCompressionOutputCount)) ? Number(message.nativeCompressionOutputCount) : 0,
             nativeEncodedFrameCount: Number.isFinite(Number(message.nativeEncodedFrameCount)) ? Number(message.nativeEncodedFrameCount) : 0,
             nativeEncodeFramesInFlight: Number.isFinite(Number(message.nativeEncodeFramesInFlight)) ? Number(message.nativeEncodeFramesInFlight) : 0,
             nativeBackpressureSkippedFrameCount: Number.isFinite(Number(message.nativeBackpressureSkippedFrameCount)) ? Number(message.nativeBackpressureSkippedFrameCount) : 0,
             nativeIdleSkippedFrameCount: Number.isFinite(Number(message.nativeIdleSkippedFrameCount)) ? Number(message.nativeIdleSkippedFrameCount) : 0,
+            nativeOutputQueueDepth: Number.isFinite(Number(message.nativeOutputQueueDepth)) ? Number(message.nativeOutputQueueDepth) : 0,
+            nativeOutputQueueBytes: Number.isFinite(Number(message.nativeOutputQueueBytes)) ? Number(message.nativeOutputQueueBytes) : 0,
+            nativeOutputQueueHighWatermark: Number.isFinite(Number(message.nativeOutputQueueHighWatermark)) ? Number(message.nativeOutputQueueHighWatermark) : 0,
+            nativeOutputQueueDroppedCount: Number.isFinite(Number(message.nativeOutputQueueDroppedCount)) ? Number(message.nativeOutputQueueDroppedCount) : 0,
+            nativeOutputQueueAwaitingKeyFrame: message.nativeOutputQueueAwaitingKeyFrame === true,
             nativeCaptureTelemetryAt: safeString(message.nativeCaptureTelemetryAt, 80),
             droppedByAgent: Number.isFinite(Number(message.droppedByAgent)) ? Number(message.droppedByAgent) : 0,
             hubIngressDropped: Number.isFinite(Number(message.hubIngressDropped)) ? Number(message.hubIngressDropped) : 0,